Iran-linked operators are using a trusted developer tool to conceal a backdoor called Dindoor inside Windows environments. The malware uses the Deno JavaScript and TypeScript runtime to execute encoded code, helping its activity blend into legitimate software use. Dindoor has appeared as a later-stage payload in spearphishing intrusions. Researchers observed it at U.S. software and […]
The post Iran-Linked Hackers Abuse Legitimate Developer Tool to Hide Dindoor Backdoor appeared first on Cyber Security News.